This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tj3h-VBfHfkDP_3xacgwnf7lakM.roa
File:                     Tj3h-VBfHfkDP_3xacgwnf7lakM.roa (raw, json)
Hash identifier:          PD9xSVT48O3a9c0XSHEw1jQXeCmyPV4HbKeOam1LsSY=
Subject key identifier:   4E:3D:E1:F9:50:5F:1D:F9:03:3F:FD:F1:69:C8:30:9D:FE:E5:6A:43
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1022
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tj3h-VBfHfkDP_3xacgwnf7lakM.roa
Signing time:             Thu 01 Jan 2026 01:46:13 +0000
ROA not before:           Thu 01 Jan 2026 01:46:13 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Feb 2026 23:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4130 (0x1022)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jan  1 01:46:13 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=4E3DE1F9505F1DF9033FFDF169C8309DFEE56A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:87:ed:14:80:bc:3d:e0:40:d1:ac:4d:e8:
                    96:05:ee:9d:42:47:59:25:d5:42:83:28:b5:d6:b4:
                    f0:2e:6c:5a:cd:ac:78:ac:d1:ca:be:46:ea:56:cd:
                    48:3f:ba:f1:d7:f2:81:7a:1a:1f:fe:1a:47:f0:9a:
                    8d:b3:13:15:1d:88:2b:a3:43:82:eb:6a:07:b4:c0:
                    0d:81:bb:8d:1e:ea:fc:17:8a:63:fd:2b:5c:1e:e6:
                    b6:9c:8a:5c:d7:d1:60:b1:f4:ff:0a:a1:ec:db:ac:
                    33:95:da:7e:a0:15:ff:4a:13:68:66:8c:df:e0:53:
                    43:bc:a8:6e:be:ae:f9:c9:be:cd:f0:72:73:3c:5b:
                    0d:61:75:32:e1:82:03:d4:60:84:97:5c:5e:83:24:
                    cc:f3:4e:58:ac:0d:db:b8:93:c8:b1:87:d3:f4:9f:
                    2f:5b:25:4b:75:72:c9:09:c4:da:37:1e:9c:94:34:
                    5b:22:87:e7:d4:e8:42:46:28:e4:1b:fb:5f:dc:41:
                    24:07:0b:02:28:80:60:35:ff:e0:66:3d:eb:0b:38:
                    81:e7:30:98:d7:81:6e:1f:c9:ba:d7:bc:6a:73:25:
                    4a:7d:1e:64:95:d9:42:54:88:b1:79:4c:55:66:f7:
                    1c:fe:d9:26:78:49:3b:7d:8f:0b:7a:bb:fc:ea:df:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3D:E1:F9:50:5F:1D:F9:03:3F:FD:F1:69:C8:30:9D:FE:E5:6A:43
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Tj3h-VBfHfkDP_3xacgwnf7lakM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:7d:65:f8:ca:2d:d1:aa:1c:0b:1a:52:99:6a:2a:cc:9f:16:
         34:69:f8:8e:7a:6a:b3:5c:69:73:d0:45:49:f3:76:a2:50:b2:
         59:7d:5a:1f:30:08:9a:77:90:1e:74:e0:0c:2b:71:96:29:8e:
         3e:fe:d5:43:32:b2:05:80:9e:3f:10:64:1d:2a:09:bf:26:b3:
         c0:f2:03:51:97:1b:74:bd:ec:c3:a8:f8:4e:a2:b7:23:25:ab:
         c8:2e:e8:82:f2:7a:d1:f9:d7:0b:80:af:87:8d:fc:ff:9b:12:
         e5:cf:f7:bd:30:6e:12:d4:8d:8f:6f:71:1c:15:61:8e:42:2e:
         e2:66:c0:23:9f:9b:cf:f2:25:09:be:8c:ad:ea:e5:59:5b:8e:
         dd:57:ed:79:ea:fe:2e:c6:6c:20:50:64:c3:03:ec:a8:96:47:
         8c:38:90:f1:ab:ef:da:c5:41:18:41:d6:bf:f6:3f:a9:36:45:
         aa:20:05:bd:f3:db:5f:40:89:23:e5:35:37:75:62:52:f8:bb:
         a0:e4:02:5e:b4:67:3c:e3:ba:5b:7d:fc:98:96:c2:b3:3d:8c:
         93:dd:c2:c5:ff:eb:f4:b4:1d:10:6c:45:47:19:ab:84:ed:a8:
         5e:a3:ff:e7:cd:4b:75:c3:b9:7f:52:00:9c:5f:89:de:92:41:
         13:9e:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:00:48 2026 by rpki-client